Lucene search
GoogleOSV:CVE-2019-1003049HistoryApr 10, 2019 - 9:29 p.m.
CVE-2019-1003049
2019-04-1021:29:01
Google
osv.dev
5
Users who cached their CLI authentication before Jenkins was updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated in Jenkins 2.171 and earlier and Jenkins LTS 2.164.1 and earlier, because the fix for CVE-2019-1003004 in these releases did not reject existing remoting-based CLI authentication caches.
Related
osv
osv
Insufficient Session Expiration in Jenkins
2022-05-13 01:01:01
Improper Authorization in Jenkins Core
2022-05-13 01:05:22
CVE-2019-1003004
2019-01-22 14:29:00
cvelist
cvelist
CVE-2019-1003049
2019-04-10 20:12:29
CVE-2019-1003004
2019-01-22 14:00:00
alpinelinux
alpinelinux
CVE-2019-1003049
2019-04-10 21:29:01
prion
prion
Authentication flaw
2019-04-10 21:29:00
Authorization
2019-01-22 14:29:00
redhatcve
redhatcve
CVE-2019-1003049
2019-04-15 03:50:05
CVE-2019-1003004
2020-04-09 10:33:33
nvd
nvd
CVE-2019-1003049
2019-04-10 21:29:01
CVE-2019-1003004
2019-01-22 14:29:00
github
github
Insufficient Session Expiration in Jenkins
2022-05-13 01:01:01
Improper Authorization in Jenkins Core
2022-05-13 01:05:22
cve
cve
CVE-2019-1003049
2019-04-10 21:29:01
CVE-2019-1003004
2019-01-22 14:29:00
openvas
openvas
Jenkins < 2.164.2 LTS and < 2.172 Multiple Vulnerabilities - Linux
2019-04-17 00:00:00
Jenkins < 2.164.2 LTS and < 2.172 Multiple Vulnerabilities - Windows
2019-04-17 00:00:00
Jenkins < 2.160 and < 2.150.2 LTS Multiple Vulnerabilities - Windows
2019-01-23 00:00:00
veracode
veracode
Weak Authentication
2019-07-08 00:06:43
Insecure Session Management
2019-05-16 03:24:12
archlinux
archlinux
[ASA-201904-7] jenkins: multiple issues
2019-04-11 00:00:00
nessus
nessus
Jenkins < 2.164.2 LTS / 2.172 Multiple Vulnerabilities
2019-04-18 00:00:00
Jenkins < 2.150.2 LTS / 2.160 Multiple Vulnerabilities
2019-01-23 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00